.gitignore

# Secrets, identity, host-specific values.
# Everything authenticated is sourced from here, never inlined into a script.
# Retrofitting this would mean rewriting history — so it is in from commit one.
# Note the trailing /* — excluding "local/" outright stops git descending into
# the directory at all, and the negations below would silently never apply.
local/*
!local/README.md
!local/*.example

# Kickstart files hold rootpw, user password hashes and LUKS passphrases.
# The committed template uses placeholders; a generated one never gets committed.
test/*.generated.ks

# Audit logs — the agent's own command history, machine-local by nature.
.claude/audit/
*.jsonl

# Security/privacy check reports — machine state (Lynis findings, Flatpak
# overrides), regenerated on demand by scripts/security-privacy-check.sh.
# Same reasoning as .claude/audit/: point-in-time local output, not project
# narrative.
.claude/security-reports/

# Local permission overrides — additionalDirectories points at an absolute,
# host-specific path to the vault clone. Same reasoning as local/: never inline
# a host-specific value into a committed file.
.claude/settings.local.json

# Session handover state — written before a reboot the agent knows will kill
# the session, read back in on the next session instead of replaying the old
# transcript with `-c`. Ephemeral working state, not project narrative: the
# vault's _inbox/ and incidents/ are where anything durable actually belongs.
.claude/handover.md
.claude/handover.consumed.md

# Python bytecode. The hooks run as scripts, never as an imported package,
# so nothing here is worth tracking.
__pycache__/
*.py[co]

# Editor and OS noise
.DS_Store
*.swp
*~

# VS Code multi-root workspace — references the private extras repo's path,
# host-specific and would break/leak for anyone forking this repo.
*.code-workspace